Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
File: 196c177a-e3f1-3adb-b77a-c204c94c485f.roa (raw, json)
Hash identifier: +Rs5w5xSq0M5oUOCtU+k6nZ1KsvO8JgS4eWtiRbmqjc=
Subject key identifier: 5A:DA:78:12:53:56:3B:E0:55:5D:A0:33:01:FE:8B:D3:CD:FC:AA:7A
Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial: 010D0C9F4328584827C5467BC023B3A8010ACA00
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 6461
IP address blocks: 129.35.160.0/20 maxlen: 24
170.225.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:7b:c0:23:b3:a8:01:0a:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=9df0f825-000c-4957-a72b-09b4bb5377be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:b3:01:4a:ed:e2:79:c9:29:72:ca:7a:6c:
d5:ee:9d:83:df:c0:a1:17:3d:d6:15:04:b1:4d:70:
bb:32:d0:6e:36:91:e2:98:a6:50:f9:1b:85:92:01:
8f:83:75:aa:17:0c:c9:02:2e:91:5e:d6:ff:28:a3:
ee:79:0b:7e:8c:36:24:45:00:74:0b:c2:3d:7a:b5:
3a:30:3f:9b:60:f6:4b:4f:33:a7:e3:93:30:ed:9e:
6d:45:0f:bc:92:61:1a:a8:0a:61:90:51:12:ad:39:
61:de:03:55:9e:9c:db:cc:30:be:ab:2d:ab:1a:e6:
53:a7:d3:5a:97:5e:18:38:bc:2f:c5:40:f4:30:7a:
70:7e:22:4e:94:93:57:a5:73:35:25:13:a2:d2:1e:
53:f6:d2:bb:74:e3:ac:60:a8:6a:23:0d:df:a0:3f:
7f:94:c4:dc:5f:5d:0e:79:16:f8:36:c5:70:2f:2f:
5a:a1:f0:db:f6:c7:25:bb:f7:37:df:dd:29:d8:b2:
81:32:fc:0e:81:1f:24:08:b0:c6:65:61:8b:3a:b2:
43:03:10:ca:b6:74:35:1f:72:2a:bd:44:70:4c:9f:
3a:06:17:ee:2a:46:1c:92:c6:e1:81:44:77:17:95:
28:76:8a:5f:72:50:9c:54:c4:85:b0:da:6d:46:8d:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DA:78:12:53:56:3B:E0:55:5D:A0:33:01:FE:8B:D3:CD:FC:AA:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
X509v3 Authority Key Identifier:
keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
sbgp-ipAddrBlock: critical
IPv4:
129.35.160.0/20
170.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:95:0e:55:d1:18:4a:6c:35:bb:8e:ad:39:9e:e9:5b:d9:92:
01:91:06:26:3e:4f:ba:5d:9f:ef:a5:8b:82:08:81:4b:9c:81:
3c:74:f1:46:27:7d:0f:1d:86:15:83:6a:71:80:52:ad:7d:39:
5d:dd:ac:0d:98:68:07:d2:4a:bb:92:19:17:31:b3:cc:4d:4b:
7b:f4:d6:f3:8f:51:d1:7c:49:c3:a0:61:a2:88:0d:b3:10:fc:
ff:ce:4f:10:de:08:b8:2e:4e:c1:68:e3:c0:e8:ca:89:bb:e9:
f0:de:f7:72:e3:54:8e:a6:b3:b7:52:fd:01:0a:4d:79:48:e8:
5a:e2:40:64:33:a7:ac:82:8f:00:42:71:76:b4:76:2f:41:c9:
7d:4e:f1:31:c7:8c:db:de:88:36:f1:37:0c:7d:4d:ee:79:08:
56:ad:bc:a9:c9:be:4b:8e:a0:8d:c4:ac:fa:c2:09:7f:4c:47:
83:73:4c:50:35:9a:87:d0:a4:c4:0a:64:7f:18:65:b1:a1:66:
d7:8e:91:80:07:e1:7c:7a:e5:ce:1a:0a:66:e8:c4:06:33:01:
36:58:09:b7:69:39:b1:f8:82:fa:2c:bc:ff:7f:d9:a8:1f:cf:
2a:fe:cc:2c:45:c7:48:b1:91:2a:4d:7f:80:1e:f7:0d:97:74:
c8:08:45:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:57 2025 by rpki-client